ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Muster Connect

v2.0.0

Install and work within a Muster co-working space. Tell your agent 'Install Muster' — it handles everything. Once connected, teaches heartbeat, tasks, initia...

⭐ 0· 345·1 current·1 all-time
by@airborneeagle
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (Muster co‑working integration) match the actual footprint: the skill connects an agent to a Muster MCP server and provides helpers for heartbeat, tasks, and lifecycle. Declared primary credential MUSTER_API_KEY is expected and used by the scripts.
ℹ
Instruction Scope
SKILL.md instructs agents to run provided scripts (install.sh, connect.sh, update.sh, uninstall.sh) and to call the Muster MCP heartbeat and tools. The instructions reference and modify local OpenClaw and Muster state files (~/.openclaw/openclaw.json, ~/.muster/*), launchd/pm2 services, and a tunnel state — all consistent with connecting/operating a local server, but broader than a purely 'agent-only' skill (it reads/writes filesystem config and can install services).
!
Install Mechanism
No packaged install spec (instruction-only) but full install script is included. install.sh clones a GitHub repo (reasonable) but also performs system package installs and runs network-sourced installers (e.g., curl | sh for Docker/nodesource, downloading cloudflared binary). Those network-executed install steps are common for server installs but are higher risk and should be audited before running.
✓
Credentials
Only one declared primary credential (MUSTER_API_KEY) is requested; other environment/config changes are local (MUSTER_ENDPOINT, .env, ~/.muster/state.json, optional macOS Keychain). The scripts store the API key and endpoint in disk config and may place a key in macOS Keychain — this is proportionate to the server/client role but you should expect credentials to be written to disk.
ℹ
Persistence & Privilege
Skill is not always: true. However, install/update/uninstall scripts create system services (launchd or pm2), modify OpenClaw config, write state files, and may add system packages and user group modifications (docker). These are expected for a server install but constitute significant system privileges — run with caution and prefer an isolated machine or VM for initial testing.
Assessment
This skill appears to do what it says (connect your agent to a Muster server), but the included scripts will perform significant system changes if you run them: installing packages, running remote install scripts, creating services, writing API keys to disk, and setting up a cloud tunnel that exposes the server. Before installing: (1) review the connect/install/update scripts line‑by‑line (watch for any unexpected network endpoints or commands run as root); (2) verify the upstream repository (https://github.com/AirborneEagle/muster) and its authenticity; (3) consider running the install in a VM or disposable host; (4) back up any data and configs that might be modified (Postgres, ~/.openclaw, ~/.muster); (5) be aware that MUSTER_API_KEY will be stored in ~/.openclaw/openclaw.json and ~/.muster/state.json (and optionally Keychain) — treat it like a secret. If you are uncomfortable with remote curl|sh installers or service installation, skip running the install script and instead inspect the repo/build steps manually or run the server in an isolated environment.
!
scripts/update.sh:66
File read combined with network send (possible exfiltration).
About static analysis
These patterns were detected by automated regex scanning. They may be normal for skills that integrate with external APIs. Check the VirusTotal and OpenClaw results above for context-aware analysis.

Like a lobster shell, security has layers — review code before you run it.

latestvk97d2e5v44dzahmqrcxtjk1zwx83mqe9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

⚡ Clawdis
Primary envMUSTER_API_KEY

Comments